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• Intro 

o CORBA (Common Object Request Broker Architecture), is a distributed object architecture that 
allows objects to interoperate across networks regardless of the language in which they were 
written or the platform on which they are deployed. 

o CORBA allows developers to write applications that are more flexible and future-proof, to wrap 
legacy systems, and to code in the language they know best. 

o The Object Request Broker (ORB) is the middleware that handles the communication details 
between the objects. The CORBA 2.0 standard, adopted in December of 1994, defines true 
interoperability by specifying how ORBs from different vendors can communicate using a common 
protocol. 
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1.0 Chapter 1. Introduction To OSF/DCE 
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Figure 1. OSF/DCE 

Open Software Foundation (OSF) Distributed Computing Environment (DCE) is 
composed of a set of services that support the development,, use, and 
maintenance of distributed applications. The services, which are also 
called DCE technology components, fall into two generic categories: 

0 Programming services 

° Distributed services 



DCE threads and RPC are programming services that include libraries that 
implement application programming interfaces (APIs) and program 
development tools. 

The remaining DCE technologies are distributed services: the directory 
server, the time server, the security server, and the file server. They 
consist in part of a daemon, or server process, that runs continuously on 
a machine and responds to requests that are sent over the network. The 
distributed services are equipped with administrative components to manage 
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the service. They also have APIs through which programmers can access 
the server. 

Application programmers deal mostly with the programming services. 
Although the distributed services are accessed through their APIs , the 
programmer usually uses the distributed services indirectly' - through RPC, 
which in turn uses the distributed services APIs. 

This document' describes how you can develop distributed applications that 
makes use of the DCE RPC and Threads services. 




Figure 2. Client/Server Design Issues 
Subtopics : 

• 1.1 DCE Design Considerations 

• 1.2 Distribution Possibilities 

• 1.3 Open Blueprint 

• 1.4 Client/Server Model 
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1.1 DCE Design Considerations 



Building software always seems harder than it ought to be. It takes 
longer than expected, the functionality and performance are not as 
expected and the resulting product is not easily changed. A software 
"crisis" has been going on for 25 years. The crisis has now reached a 
point where it is impacting the life of the enterprise. With a two to 
three-year backlog of applications to be developed and a two to three-year 
software development cycle, information systems are not able to provide 
the competitive advantages to the business that the underlying technology 
promises. 

In addition, the applications that are needed in the 1990s are becoming 
much more complex. Distributed applications are now needed. These 
distributed applications involve multiple platforms from multiple vendors 
using many software offerings. One of the major objectives of OSF/DCE is 
to address some of these issues. Let's briefly go through some of the 
issues associated with client/server design. 

° Distribution Points 

Perhaps one of the first questions that comes to mind when thinking of 
distributed applications is where will the application be partitioned? 
Although there appears to be an infinite number of possibilities, 
developers are finding several distribution models helpful in 
designing their applications. We will discuss these models on 
Figure 3 in topic 1.2 

° System Software Support 

Key to the application design process is the base upon which 
application rests. That is, what type of system support is 
available. The type of things that have to be dealt with here are 
multi- tasking, scheduling, resource allocation, locking and recovery. 
Although the technology associated with multi-tasking is generally 
thought of as an operating system function, in the client/server 
environments application programmers may have to deal with these 
technologies also. The issue becomes particularity crucial when 
writing servers that support many clients. Many of the complexities 
of distributed application development can be handled by system 
software. One of the main purposes of DCE is to provide a layer of 
system software to ease the application development process. 

0 Inter-process Communication 

The most popular forms of inter-process communication are 
conversation, remote procedure call, and message queueing. Although 
client/server applications can be written using any of these 
inter-process communication technologies, the remote procedure call is 
probably the most natural. We will, of course, be focusing on the 
remote procedure call in this presentation. 

° Rendezvous 

One of the obvious concerns for client/server applications is how the 
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client is going to find the server that it needs. That is, how they 
are going to find each other or rendezvous. DCE provides many 
services for addressing these concerns with the directory services, 
but the application developer has to invoke the services. We will 
see later in this presentation how this affects the server design and 
in some cases the client design. 

° Security 

As we have discussed before, security in a client/server environment 
is more complex than in a single-host environment. The risks are 
greater and the solutions are more involved. The application design 
issue is the potential risk associated with a security breach versus 
the overhead of the security protection. The DCE security services 
provide a range of security protection that an application can use. 

° Modular Design 

Modular design techniques are important in any software design. 
Client/server design requires a stricter adherence to good modular 
design practices. The interface between modules must be more exact 
than in centralized designs. In centralized design many modularity 
problems can be resolved by shared global or external data; this is 
not possible in a client and server environment. One of the 
motivating factors in the movement toward client/server is the reuse 
of servers in application construction. The reuse of a server is 
dependent on how coherent its design is. 

° Parallel Processing 

One of the appealing characteristics of client/server applications is 
that they can use many processors to accomplish a given task. 
Parallel processing application requirements impact the way both the 
client and server are designed. DCE provides multi -threading support 
for parallel processing. We will see later how this is accomplished. 

° Language Support 

Which programming language is used is an important consideration in 
application design. DCE is written in C and designed for use by C 
programmers. The data representation in DCE is patterned after C, 
the client/server interface assumes a C development process; and the 
application programming interfaces assume a C caller. It isn't clear 
how easily another programming language such as COBOL or PL/l will 
work directly with DCE. 

° Stateful/Stateless Servers 

If a server can be called repeatedly by a specific client, it may make 
sense to have the server remember who has called it before and with 
what results. The DFS is an example of a stateful server that 
remembers that the client has opened a file when it comes to make a 
read request and so on. Care will have to be taken over the design 
of such a server where the recovery scenarios could be quite complex. 

° Multiple Instances 

Servers could be replicated many times. You may wish to replicate 
servers for performance or availability reasons. Are these going to 
provide identical services or are they going to be different? How 
will a client choose between multiple instances? Also, servers must 
be able to support several clients at the same time. How will this 
be handled? 
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0 Data Conversion 

There are many ways of representing data in a computer. It seems 
like every possible alternative has been tried by some vendors. In 
centralized processing, the different data types are just an 
idiosyncrasy of the platform. In a client/ server environment, the 
different data types and format becomes a major design issues. The 
kinds of problems that must be addressed are ASCI I /EBCDIC, 
" " ~ big-endian/ little -endiah," floating point formats, code pages, and so 
on. 

° Data Placement 

Where data is placed in the network can become a significant 
performance and availability issue. If the data and the application 
that uses the data are in different places, the network can bottleneck 
and long delays can result . Data that is widely used can shut down 
the complete environment when not available. Distributed design can 
be driven by data placement. DCE will not tell the designer where to 
put the data, but when the decision is made, it can help with the 
solution. Typical solutions involve techniques of fast data movement 
and replication of the data. 

° Network 

There are many kinds of telecommunication networks. Many enterprises 
have several networks. Each network's software provides a 
programming interface that is different. This means, for example, 
with a TCP/IP network the sockets or streams interface is used; for a 
SNA network, the programmer may use the LU 6 . 2 protocol. In dealing 
with these protocols, the programmer must be familiar with the network 
addressing schemes, recovery processes, message buffering, and so on. 
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1.2 Distribution Possibilities 
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Figure 3. Distribution Possibilities 

What are the methods of splitting programs in order to distribute them? 
Theoretically, the application designers can divide their program any- 
place in the execution sequence. That is what is implied by F igure 3 . 
IBM did a study of those customers developing distributed applications to 
see where the splits actually take place. We saw a pattern in these 
applications. Basically, they fell into one of eight groups: 
non-distributed, remote presentation, front-ending, distributed logic, 
staged data, resource centric, process driven, and multi-application. 
The non-distributed applications are not of interest to this presentation 
and are included only for contrast with the distributed designs. Let's 
look at the others : 



Remote Presentation 

Remote presentation could be represented in Fig u r e 3 as a line to the 
far left of the Display Processing box. There is no application code 
stored on the workstation. The presentation service is distributed, 
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part on the workstation and part on the host. This type of 
arrangement uses interface management systems such as X,-windows . 
This approach is often used as the simplest way to attach a 
workstation to a host. Typically users run personal productivity 
software on the workstation and use multiple windows with terminal 
emulators to access several hosts. 

0 Front -Ending 

The front-ending design differs from remote presentation because the 
workstation has front-end application logic. The front-end 
application logic may be used to simply transform the user's interface 
or to integrate information from other sources. In either case, the 
display image is generated twice - once at the host and once at the 
workstation. Easel** for OS/2 is an example of this type of design. 

° Distributed Logic 

In the distributed logic design, the workstation and host application 
components interact with each other directly by program-to-program 
communication. The conversational, remote procedure call, and the 
message queueing models are used. This type of design is usually a 
new application in contrast to front-ending. An important 
consideration for this design is that the stored data is centralized 
on the back-end system. The business needs of the enterprise may 
dictate centralized data for sharing, integrity, or security reasons. 

0 Data Staging 

Data staging typically involve a 3 -tiered design approach. The 
master copy of the data remains on a regional back-end system, while 
snapshots of the data are staged to local or departmental systems. 
This provides performance and availability improvements for the users, 
performance improvements through quicker response time, and less 
demand on the network. Availability is provided through no single 
source of failure. 

° Resource Centric 

Remote resources are accessed through programming interfaces used for 
local resources in the resource centric design. A well-known example 
of this is the Network File System. A resource-centric design works 
best when the amount of data accessed is easily supported by the 
available communication bandwidth. If large amounts of data have to 
be moved, significant performance problems can result. 

° Process -driven 

The process -driven design may be characterized by a step-wise 
execution of the application. Each application may be. viewed as a 
job step in a higher-level process that is designed to accomplish a 
business -oriented task. Typically, a workflow manager regulates the 
overall execution of the business process. In this type of design, a 
message- style service often seems to be preferred over conversational 
or RPC. 

° Multiple Application 

The multiple-application design has application logic and stored data 
split apart and distributed. The data is private to the distributed 
application and is not accessible by applications on other nodes. 
The various pieces of the application are active at the same time and 
engage in simultaneous communication with each other. This design is 
suggestive of an object-oriented style where each application 
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encapsulates its data. 

So where does DCE fit with these design models? Resource-centric design 
with NFS made RPC a common practice in the UNIX world. It is likely that 
system vendors will continue to exploit RPC to provide distributed 
services. Remote presentation and front-ending will also be supported by 
software vendor products that will use RPC. It is likely that 
process-driven applications will prefer the message gueueing inter -process .. 
communication "technology. 

Application programmers will be using DCE for writing application that fit 
the distributed logic, data staging, or multiple-application design 
mode 1 s . 

The distributed-design models discussed this section are based on a paper 
written by Dr. John Shedletsky and John Rofrano. The complete results 
the customer study is in Application reference design for distributed 
systems, IBM Systems Journal Vol.32 No. 4, 1993. 
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1.4 Client/Server Model 



A useful model for implementing distributed application is the 
client/server model. In this model, a distributed application consists of 
two parts: a client program and a server program. The two programs are 
usually running on different systems attached to a network, and talking 
with each other using its unique protocols. The client's role is to ask 
the server part to carry out user's requests on behalf of its user. The 
server then fulfills the client's request. Fig ure 5 illustrates the 
client/server model. 



Server Program ) Request 




Response ( Client Program ) 



Figure 5. Client/Server Model 

For example, the distributed file system (DFS) Service offered by DCE is a 
distributed application based on the client/server model. The client 
program of the DFS resides on every DCE system. With the underlying help 
of the DFS client program, you will be able to access files that reside on 
remote hosts. On remote hosts, the DFS server program is running, and 
listening for file-access requests sent by client programs on behalf of 
users. After the DFS server program fulfills the request and sends back 
a response to the client host, the DFS client program returns the response 
to the user. 
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At a Glance 

• Reduced disk space and memory with new Slim Client 

• Public Key Certificate Login based on TOG Request for Comments (RFC) 68.4 

• Support for machines with multiple NICs 

• Support for DCE client machines configured with DHCP 

• CDS Preferencing 

• Kerberos V5 interoperability 

• Public Key Server support 

• Microsoft Visual C++ V5.0 compiler support 

• Performance improvements including better management of RPC and configuration parametei 

• Data Encryption Standard (DES) and Commercial Data Masking Facility (CDMF) encryption 
capabilities 

• Year 2000 ready 



For ordering, contact: 

Your IBM representative, an IBM 
Business Partner, or IBM North America 
Sales Centers at 

800-IBM-CALL Reference: SE010 



http://www-306ibmxom^ 3/15/04 



IBM Offering Information 



Page 2 of 14 



EXTRA! EXTRA! . . . 

Subscribe to IBM iSource, your electronic 
source for customized IBM information! 
Go to our web site at 
http://www.ibm.com/isource 
or send an e-mail to 
info@isource.ibm.com 
with the word SUBSCRIBE in the body. 



Overview 

IBM Distributed Computing Environment for Windows NT (R), Version 2.2 (DCE NT V2.2), an extensu 
DCE for Windows NT V2.0, is a server/client package based on DCE Release 1.2.2 from The Open G 
(TOG). 

Major new features include: 

• Slim Client 

• Public Key Certificate Login 

• Kerberos V5 interoperability 

• Remote procedure call (RPC) code set conversion 

Additionally, this program includes support for systems with multiple Network Interface Cards (NICs) c 
systems configured to use the Dynamic Host Configuration Protocol (DHCP), plus performance 
improvements and enhanced usability. 

Major components of DCE NT V2.2: 

• DCE Runtime Services (client services) 

• Slim Client 

• Cell Directory Services (CDS) 

• Security Services (SS) 

• Application Development Kit (ADK) 

The DCE NT V2.2 program package also includes IBM DCE Application Development Kit and Runtim 
Services for Windows (TM) 95, Version 2.0, for use on Windows 95 systems in your DCE network. Fo 
customers who use software servers other than DCE for Windows NT, two additional program packag 
available: 

• IBM DCE Runtime Services for Windows NT, Version 2.2 - enables Windows NT systems to t 
DCE clients using either the full administrative client services or the Slim Client. 

• IBM DCE Application Development Kit and Runtime Services for Windows NT, Version 2.2 - c 
components for DCE application developers along with the full administrative client services ar 
Slim Client. 

IBM DCE Management for Tivoli Management Framework, Version 1 .0, a feature for use in Tivoli 
environments, is included in each of the program packages in this announcement. This English-only ft 
is not available as a separate program. 

TOG was formerly known as Open Software Foundation (OSF). OSF is still used in some technical 
descriptions. 



Key Prerequisites 

• Computers with Intel-based processors on a TCP/IP, LAN, or WAN network and running Micrc 
(TM) Windows NT 4.0 with Service Pack 3. 

• Entrust/Entelligence 4.0 client is required for Public Key Certificate Login. 



Planned Availability Date 



http://www-306.ibmxor^ 3/15/04 



IBM Offering Information 

November 30, 1998 



Page 3 of 14 



This announcement is provided for your information only. For additional information, contact your IBM 
representative, call 800-IBM-4YOU, or visit the IBM home page at: http://www.ibm.com 



DESCRIPTION 

The IBM DCE NT V2.2 programs, jointly developed by IBM and Digital (TM) Equipment Corporation, \ 
based on DCE Release 1 .2.2 and serve as upgrades for the DCE for Windows NT Version 2.0 progra 
based on DCE Release 1 .2.1 . 

New in V2.2: 

• Slim Client reduces DCE memory and disk space resource consumption on client systems. Th 
Client provides the same programming environment to RPC-based applications as the full DC! 
(Runtime Services) but requires no cell administrator intervention for configuration (configurate 
local only). 

• Public Key Certificate Login allows DCE users to prove their identity to the DCE authentication 
service using an X509v3 digital certificate and its associated public key pair, rather than a shai 
secret key password. One benefit of this authentication mechanism is that, in the event of a 
compromise of the DCE Security Server, public key users do not have any identifying informat 
exposed to the intruder. Users need not have either a traditional secret-key password nor a pu 
key pair generated by the DCE Security Server. This feature is intended for customers who an 
currently using the Entrust Public Key Infrastructure (PKI) and have a need to map Entrust use 
DCE users for authentication and access to resources provided by DCE. DCE NT 2.2 servers 
clients support this public key certificate login feature. 

• DHCP Client support enables DCE NT V2.2 clients to run on Windows NT workstations or sen 
that use DHCP to obtain their IP addresses. DCE servers must have IP addresses that remain 
constant. 

• Multiple NIC support enables DCE for Windows NT V2.2 to run on PCs with multiple NICs inst; 
An environment variable is used to determine which of the NICs is used. 

• CDS Preferencing improves the performance of CDS clients by providing a ranking to the orde 
which clearinghouses are contacted by the client for CDS information. This is accomplished 
automatically through the use of defaults associated with the location of CDS clients with respe 
CDS servers or by manual overrides made by cell administrators. 

• Kerberos V5 Interoperability is a TOG DCE 1 .2.2 feature that includes an implementation of th 
Kerberos Version 5 (V5) authentication and key distribution service in the DCE Security Servei 
Kerberos V5 enables applications running on either DCE or non-DCE platforms to access the i 
Security Server as a full-function IETF-RFC Kerberos Server. 

• Public Key Server support provides the TOG DCE 1.2.2 capability of using public and private l< 
initial DCE authentication from client systems that support the TOG DCE 1 .2.2 public key feati 
DCE NT 2.2 clients do not support this public key feature. Public key support does not include 
public key certification API or the private key storage server. 

• Microsoft Visual C++ V5.0 compiled DCE applications are fully supported. 

• Tunable Timeout Values enable configuration of internal timeout defaults for timeouts and 
configuration call intervals, Security Server initialization, TCP connections, and calls to CDS. 

• RPC Code Set Conversion, enhanced from the original TOG implementation, provides cross-p 
code set support. The RPC interface version number has been increased to 2.0, which is the v 
supported in other IBM implementations of DCE. 

For the convenience of customers who have DCE networks that include multiple operating systems, e 
program package in this announcement includes: 
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IBM DCE Application Development Kit and Runtime Services for Windows 95, V2.0 
IBM DCE Management for Tivoli Management Framework, V1.0 



Cryptographic Capabilities 



Two types of data privacy are offered: Commercial Data Masking Facility (CDMF) and Data Encryptio 
Standard (DES). CDMF enables 40-bit encryption. DES enables both 56-bit and 40-bit. 

Both versions are approved for export outside the United States. However, some countries may have 
import regulations that apply to products containing encryption capability, particularly DES. Contact yc 
representative or your local export/import coordinator for information about your specific location. 



Year 2000 

These products are Year 2000 ready. When used in accordance with their associated documentation, 
are capable of correctly processing, providing, and/or receiving date data within and between the twei 
and twenty-first centuries, provided that all products (for example, hardware, software, and firmware) i 
with the products properly exchange accurate date data with them. 

The service end date for these Year 2000 ready products is January 31 , 2001 . 



REFERENCE INFORMATION 

Product information and software announcements are available via IBM Web sites. Information can b< 
accessed (searched) by product name or number, announcement letter number or date, type of prodt 
keywords. Visit the following URLs: 

http://www.software.ibm.com/enetw o rk/dce 

http://www.ibmlinkjbm.com 

http: //www .ib m. co m/n e w s 

Review the following Software Announcements for more details about DCE products: 

• 298-087 dated March 24, 1998 (DCE Runtime Services and Application Development Kit for 
Windows 95, Version 2.0) 

• 2 98 - 06 3 dated February 24, 1998 (IBM DCE for AIX (R), Version 2.2, and Related DCE Produ 

• 297-376 dated September 16, 1997 (IBM DCE for Windows NT, Version 2.0) 
Trademarks 

IBMLink and eNetwork are trademarks of International Business 
Machines Corporation in the United States or other countries or 
both. 

AIX is a registered trademark of International Business 
Machines Corporation in the United States or other countries or 
both. 

Windows and Microsoft are trademarks of Microsoft Corporation. 
Windows NT is a registered trademark of Microsoft Corporation. 
Digital is a trademark of Digital Equipment Corporation. 
Other company, product, and service names may be trademarks or 
service marks of others. 
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EDUCATION SUPPORT 

Call IBM Education and Training at 800-IBM-TEACH (426-8322) for catalogs, schedules, and enroling 



PUBLICATIONS 

Release Notes and Quick Beginnings, in the language of the program package, are shipped with ead 
program. All other product information and documentation for all languages is provided on the CD-RC 
with the program software. 



TECHNICAL INFORMATION 



Specified Operating Environment 



Requirements for DCE for Windows NT (R) 

Each DCE NT V2.2 Server, Runtime Services Client (full/admin client), or Slim Client, requires an Inte 
based system with Microsoft (TM) Windows NT 4.0 Server or Workstation with Service Pack 3 installe 
memory, disk space, and CPU requirements as shown in the tables below: 

Table 1: Memory and CPU Requirements 

The numbers in this table reflect the Windows NT operating system requirements. 





| Memory 


+ 

| CPU 


DCE NT V2.2 
Server 


| Minimum: 32 
| Recommended 
| 64 MB, or 


MB | Minimum: Pentium (TM) 90 

| Recommended: Pentium 
higherj 166, or higher 


DCE NT V2.2 
Client 

(Runtime Svcs) 


| Minimum: 16 
| Recommended 
j 32 MB, or 


MB [Minimum: 4 86 

| Recommended : Pent ium 
higherj 90, or higher 


DCE NT V2 . 2 
Slim Client 
(Runtime Svcs) 


| Minimum: 8 MB* (Minimum: 4 86 
(Recommended: | Recommended : Pentium 
j 16 MB, or higher] 90, or higher 


* The Slim Client actually uses less than 1 MB of 
memory . 



Table 2: Disk Space Requirements for DCE NT V2.2 Components 

. + . 

| | Disk Space | 
j Program Component j Requirements j 
| + | 

j DCE Runtime Services (Client) | 29.5 MB j 

j DCE Application Development Kit . j 6 . 7 MB j 

http://w\\w-306abm 3/15/04 



IBM Offering Information 



Page 6 of 14 



DCE Security Server | 


4 


1 


MB 


DCE Cell Directory Server | 


0 


9 


MB 


Event Management System (EMS) | 


1 


0 


MB 


Simple Network Management Protocol (SNMP) j 


2 


0 


MB 


Service Files | 


2. U 


Z 


MB 


Online Documentation | 


14 


3 


MB 


Slim Client j 
+ 


4 


8 


MB 



Notes 

• Memory requirements for user applications and data are not included. 

• Server memory requirements vary with the size and usage of the Security Services registry an 
CDS directory. 

• Disk space consists of installation requirements only. It does not include the following: 

o Paging file 

o Log files, security credential files, or other DCE data files 
o Server Security Services registry or CDS server directory 



Additional Software Requirements 

• DCE Runtime Services for Windows NT must be installed before installing and using DCE ADI 
Windows NT, DCE Cell Directory Server for Windows NT, and DCE Security Server for Windo 

• A DCE cell with at least one DCE Cell Directory Server and at least one DCE Security Server 1 
clients. 

• Suitable compilers and linkers must be installed on your system before you can use the DCE / 
Windows NT. On Intel platforms, Microsoft Visual C++ Version 4.0, or later, provides a compat 
environment. 

• Entrust Product Requirements: 

Entrust products are required only if you plan to use the Public Key Certificate Login feature. C 
Windows NT, this feature requires the Entrust/Entelligence Version 4.0 (client). 

The Entrust Public Key Infrastructure (PKI) is not required on DCE client systems, but must be 
available for issuing certificates to users. The recommended level of the Entrust/PKI is Versior 



Requirements for DCE for Windows (TM) 95 Clients 

Each Windows 95 client requires an Intel-based system with Microsoft Windows 95 Version 1.0 with S 
Pack 1 installed, and the memory, disk space, and CPU requirements as shown in the table below: 



Table 3: Requirements for Windows 95 Client Systems 





| Disk Space | 


Memory 


| CPU 




Runtime Services 


| 31 MB, | 


Minimum 


| Minimum: 


486 




| or higher j 


16 MB 


| Recommended: 


Pentium 90, 




1 1 




I 


or higher 


Application 


|6.8 MB, | 


Minimum: 


| Minimum: 


486 


Development Kit 


| or higher j 


16 MB 


| Recommended: 


Pentium 90, 
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| | or higher 



Add. i t i ona 1 


jib./ MB , J 


Minimum : 


| Mini mum : 


A Q C 


Documentation 


j or higher | 


1 o l v lo 


| Recommended : 


Fenuium j\j t 




1 1 




i 


or higher 


Service Files 


| 14 MB, | 


Minimum: 


| Minimum: 


486 




j or higherj 


16 MB 


| Recommended : 


Pentium 90', 




1 - - - I 




I 


or higher 



Note: Memory and fixed disk requirements for user applications, swapper files, and data are not inclu( 

Additional Software Requirements 

• DCE Runtime Services for Windows 95 must be installed before installing and using DCE ADH 
Windows 95. 

• DCOM for Windows 95, Version 1 .1 , or later. 

• A DCE cell with at least one DCE Cell Directory Server and at least one DCE Security Server. 

• Suitable compiler and linkers must be installed on your system before you can use the ADK. 

• Microsoft C++ Version 4.0, or later, provides a compatible environment. 

For additional information about DCE for Windows 95 programs, refer to Software Announcement 29£ 
dated March 24, 1998 (IBM DCE Runtime Services and Application Development Kit for Windows 95, 
Version 2.0). 



Requirements for DCE Management for Tivoli Management Framework 

This IBM feature is for use in Tivoli Management Framework environments. Specific prerequisite 
requirements are provided in the documentation included with the program software. 

Compatibility: DCE NT V2.2 complies with applicable DCE Release 1.1, Release 1.2.1, and Release ' 
specifications from TOG and interoperates with other IBM software servers (such as AIX (R), OS/2 (R 
Warp) and non-IBM DCE implementations (such as HP, Digital, Gradient, and Solaris). 

DCE NT V2.2 provides source-level runtime compatibility with DCE systems from other vendors for 
applications that conform to the TOG DCE Application Environment Specification (AES). 

More information on interoperability and compatibility is located in the readme.txt file that is part of the 
NT V2.2 program. 

Supported Transport Protocols: DCE NT V2.2 provides RPC communications over TCP/IP and UDP/I 
transport protocols. 

Limitations: DCE NT V2.2 includes all of TOG DCE 1 .2.2 features except: 

Unsupported Services: 

• Security 

o Transitive Trust in a cell hierarchy 

o The Public Key Certificate Management API . 

o The Private Key Storage server 

o User-to-User Authentication 

o Global Groups. 

• Directory 

o Hierarchical Cells 

o Global Directory Service (GDS) is not provided in this release. However, GDS provided 
another vendor can exist in the same cell and be used for intercell communications. 

• RPC Single-threaded RPC 
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Unsupported Commands: 

• Security 

o sec_salvage_db 
o riogin and rlogind 
o rsh and rshd 

• Distributed Time Service - dtss-graph 
Unsupported Subroutines: 

" • Distributed File System (DFS) APIs 

• RPC code set wchar_t functions 

Limitations of Supported Services 

Public Key Certificate Login, based on TOG RFC 68.4, has the following limitations: 

• The kinit command cannot be used to refresh expired DCE credentials unless the DCE passw< 
provided. Using the Entrust user profile and passphrase for this refresh operation is not suppoi 
the Entrust user profile name and passphrase are synchronized with the DCE principal name < 
password, this limitation is transparent to the user. 

• When multiple Entrust users are mapped to a single DCE principal, the level of detail of DCE 
functionality such as auditing and access control is reduced. Only the DCE principal informatio 
available and used in audit records and access control checks. 

• If the pwd_val_type Extended Registry Attribute (ERA) that requires password strength checkii 
attached to a DCE principal, these checks are only enforced on the DCE password for that prir 
The Entrust PKI establishes a separate set of rules which are enforced on the Entrust passphr 

• The key management API is used only by applications that use the shared-secret key authenti 
protocol. Application servers cannot use the public key certificate login protocol. 

• When using Generic Security Service Application Programming Interface (GSSAPI), the DCE 
administrator must set up an account in the DCE registry database for the initiator and the acc 
The acceptor cannot use Public Key Certificate Login. No restrictions apply to the account for 1 
initiator. 

Public Key Login Support (based on DCE 1.2.2) has the following limitations: 

• The DCE Security Server supports login requests from DCE clients that support the TOG 1.2.5 
key login protocol. The TOG 1.2.2 protocol uses public-private key pairs that are generated by 
DCE Security Server itself. This feature is separate from the IBM Public Key Certificate Login i 
for DCE that supports login requests based on public key information that is generated by the I 
public key infrastructure. 

• The DCE client does not support the use of TOG 1 .2.2 public key protocol to login to DCE. For 
compatibility and interoperability purposes, the DCE Security Server supports these login requ 
from other DCE clients that do use the protocol. 



Planning Information 

Direct Customer Support: Direct customer support is available through the Personal Systems Support 
This fee service enhances your productivity by providing voice and electronic access into the IBM sup 
organization. Personal Systems Support Line will help answer questions pertaining to usage, and sus 
software defects for eligible products. For more information call 800-237-551 1 . 

Packaging: Each IBM DCE for Windows NT, Version 2.2, program package contains: 

• Program software, including softcopy documentation, on three CD-ROMs: 

1 . DCE for Windows NT V2.2 

2. DCE for ADK and Runtime Services for Windows 95 V2.0 

3. DCE Management for Tivoli Management Framework V1 .0 

• International Program License Agreement (IPLA) 

• License Information (LI) 

• IBM Proof of Entitlement (PoE) 
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• Customer Service and Support Flyer 

• Quick Beginnings 

• Release Notes 

Each IBM DCE Runtime Services for Windows NT, Version 2.2, program package contains: 

• Program software, including softcopy documentation, on two CD-ROMs: 

1 . DCE Runtime Services for Windows NT V2.2 

- - - 2. " DCE Management for Tivoli Management Framework, VI. 0 

• IP LA 

• LI 

• IBM PoE 

• Customer Service and Support Flyer 

• Quick Beginnings 

• Release Notes 

Each IBM DCE ADK and Runtime Services for Windows NT, Version 2.2, program package contains: 

• Program software, including softcopy documentation, on two CD-ROMs: 

1 . DCE ADK and Runtime Services for Windows NT V2.2 

2. DCE Management for Tivoli Management Framework, V1 .0 

• IPLA 

• LI 

• IBM PoE 

• Customer Service and Support Flyer 

• Quick Beginnings 

• Release Notes 



Security, Auditability, and Control 

The DCE NT V2.2 programs use the security and auditability features through the full support of DCE 
authenticated RPC, allowing secure access in a distributed computing environment. 

The customer is responsible for evaluation, selection, and implementation of security features, admini 
procedures, and appropriate controls in application systems and communication facilities. 



ORDERING INFORMATION 



Program packages with media, use authorizations (UAs) without media, upgrade options, and Passpc 
Advantage options are available for the programs in this announcement. 

• IBM DCE for Windows NT, Version 2.2 is a server/client program with multiple components. 
Purchase of this package includes entitlement for: 

o One installation of the Security Server 

o One installation of the Cell Directory Server 

o One Registered User 

o Unlimited installations of the Application Development Kit 

o Unlimited installations of the Runtime Services or Slim Client on machines that access 
IBM DCE server 

If you wish to install one or both server components on additional machines, you should purch; 
applicable Install UA in quantities equal to the number of installations. 

For additional users defined to the network, you should purchase Registered User UAs in the < 
equal to the number of users defined in your network. 

If you wish to install the Runtime Services or Slim Client on systems that access a non-IBM DC 
server, you should purchase a Runtime Services install UA for each installation. Refer to the o 
information for DCE Runtime Service for Windows NT. 

• IBM DCE Runtime Services for Windows NT, Version 2.2 provides the client components of th 
NT V2.2 in a separate package. This package is intended primarily for customers who use DC 
servers other than Windows NT but want to include Windows NT systems as clients in their ne 
Purchase of this package entitles you to install either the Runtime Services (full/admin client) c 
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Slim Client on one machine. If you wish to install either of these components on additional cliei 
machines, you should purchase an Install UA for each installation of either the Runtime Servic 
the Slim Client. 

• IBM DCE ADK and Runtime Services for Windows NT, Version 2.2 includes both the client 
components and the ADK components of DCE NT V2.2. This package is intended for custome 
want to develop or enable distributed applications for Windows NT. 

Purchase of this package includes entitlement for one installation of the ADK and one installati 
either the Runtime Services (full/admin client) or the Slim Client. 

Note: The ADK requires that the Runtime Services be installed prior to installing the ADK. 

If you wish to use the ADK and Runtime Services on additional systems, you should purchase 
Install UA for each additional machine on which these components are to be installed. 



Passport Advantage Program: The Passport Advantage options for these products are maintained by 
(R) Corporation. For more information, visit: 

htt p ://www .l otus.co m/p as sp o rt 

Programs and Use Authorizations 



Description 



Order 
Number 



Feature 
Number 



Part 
Number 



DCE NT V2.2 Program 
Package 
DES English 
CDMF English 



5801-AAR 4341 39L7835 
5801 -AAR 4342 39L7836 



Note: Use Authorizations are for both CDMF and DES versions 



DCE NT V2.2 UAs : 

1 Server Install 
1 Registered User 
5 Registered Users 
10 Registered Users 
50 Registered Users 



5802 


-AAR 


2788 


39L7879 


5807 


-AAR 


1217 


39L7881 


5807 


-AAR 


1218 


39L7882 


5807 


-AAR 


1219 


39L7883 


5807 


-AAR 


1222 


39L7884 



DCE NT V2.2 Optional 
Component UAs: 
1 Install SS Only 
1 Install CDS Only 

DCE NT Runtime V2.2 
Program Package 

DES English 

CDMF English 
1 Install UA (for both 



5802-AAR 
5802-AAR 



2789 
2790 



39L8089 
39L8090 



5801-AAR 4436 39L7949 



5801- AAR 

5802- AAR 



4448 
2791 



39L7950 
39L7993 



DES and CDMF versions) 

DCE NT ADK/RT V2.2 
Program Package 
DES English 
CDMF English 
1 Install UA (for both 
DES and CDMF versions) 
Upgrades 



5801-AAR 4491 39L8019 



5801- AAR 

5802- AAR 



4492 
2792 



39L8020 
39L8063 



DCE NTV2.2 Upgrade 
Program Package 
DES English 
CDMF English 

DCE NT V2.2 Upgrade UAs: 
1 Server Install Upgrade 



5803- AAR 1773 39L7857 
5803-AAR 1774 39L7858 

5804- AAR 1038 39L7880 
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1 Registered User 


5808-AAR 


0537 


39L7885 


Upgrade 








5 Registered Users 


5808-AAR 


0538 


39L7886 


Upgrade 








10 Registered Users 


5808-AAR 


0539 


39L7887 


Upgrade 








50 Registered Users 


5808-AAR 


0540 


39L7888 


. Upgrade - 









DCE NT V2.2 Optional 
Component UAs: 
1 Install Upgrade 

SSOnly 5804-AAR 1039 39L8091 

CDS Only 5804-AAR 1040 39L8092 

DCE NT Runtime V2.2 

Upgrade Program Package 
DES English 5803-AAR 1715 39L7971 

CDMF English 5803-AAR 1716 39L7972 

1 Upgrade Install UA 5804-AAR 1041 39L7994 



DCE NT ADK/RT V2.2 

Upgrade Program Package 
DES English 5803-AAR 1742 39L8041 

CDMF English 5803-AAR 1744 39L8042 

1 Upgrade Install UA 5804-AAR 1042 39L8064 



Upgrade Protection (Entitled Customers): Customers who have previously acquired Software Advants 
Upgrade Protection, and have not migrated to the Passport Advantage Offering as shown in the table 
will receive automatically their new media pack shortly after general availability. 



Software Advantage Upgrade Protection Entitlement 

Version 2.0 

Upgrade Version 2.2 

Protection Media Pack 

Part Numbers Part Number 

Description (English) (Select One) 



DCE for Windows NT (DES) 



1 Registered User 

1 Install SS & CDS 

1 Install of SS Only 
1 Install of CDS Only 



4071132 
(DES) 

4071133 

(CDMF) 
4076094 

4076100 



39L7889 



39L7890 



DCE Runtime Svcs for 
Windows NT (DES) 
1 Install 4302144 39L7995 

(DES) 
39L7996 
(CMF) 

DCE ADK/RT Svcs for 
Windows NT (DES) 
1 Install 04L0373 39L8065 

(DES) 
38L8066 
(CDMF) 



TERMS AND CONDITIONS 



Licensing: IPLA. PoEs are required for all authorized use. 
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Refer to the Ordering Information section for details about entitlements and use authorizations. 

The DCE Management for Tivoli Management Framework feature may be installed on as many mach 
the customer needs without UAs or charges. Program Services are available for this program. 

Limited Warranty Applies: Yes 

- - - - - - Program-Servicesi Available until January 317 2001" 

Money-back Guarantee: 30-day t money-back guarantee 

Copy and Use on Home/Portable Computer: Yes 

Support Line: Personal Systems Support Line 

Upgrades: You can acquire upgrades up to the currently authorized level of use of the qualifying progi 

Volume Orders: Yes, contact your IBM representative. 

Passport Advantage Applies: Yes 

AIX/UNIX (R) Upgrade Protection Applies: No 

Entitled Upgrade for Current AIX/UNIX Upgrade Protection Licensees: No 
Variable Charges Apply: No 



CHARGES 

The charges provided in this announcement are suggested retail prices for the U.S. only and are prov 
for your information only. Dealer prices may vary, and prices may also vary by country. Prices are sut 
change without notice. For additional information and current prices, contact your local IBM represent 



IBM DCE for Windows NT, Version 2.2 



Description 



Part 
Number 



OTC 



Program Packages and Use Authorizations 



Program Package 
with DES 
with CDMF 

UAfor 1 Server Install 
SS & CDS 
SS only 
CDS only 

UAfor 
1 Registered User 
5 Registered Users 
10 Registered Users 
50 Registered Users 

Description 



Part 



39L7835 $3,999 
39L7836 3,999 

39L7879 3,969 
39L8089 2,199 
39L8090 1,799 



39L7881 29 

39L7882 139 
39L7883 269 

39L7884 1,335 

Number OTC 



Upgrade Program Packages and Upgrade UAs 



Upgrade Program Pkg 

with DES 39L7857 $2,399 

with CDMF 39L7858 2,399 
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Upgrade UA: 1 Server Install 

SS & CDS 

SS only 

CDS only 
Upgrade UA: 

1 Registered User 

5 Registered Users 

10 Registered Users _ 

50 Registered Users 



39L7880 2,385 
39L8091 1,319 
39L8092 1,079 



39L7885 
39L7886 
39L7887 
39L7888 



19 
85 
159 
789 



IBM DCE Runtime Services for Windows NT, Version 2.2 

Part 

Description Number OTC 

Program Packages and Use Authorizations 
Program Package 

withDES 39L7949 $149 

withCDMF 39L7950 149 

UA: 1 Install 39L7993 95 

Upgrade Program Packages and Upgrade UAs 

Upgrade Program Package 

with DES 39L7971 89 

with CDMF 39L7972 89 

Upgrade UA: 1 Install 39L7994 59 



IBM DCE ADK & Runtime Svc for Windows NT, Version 2.2 

Part 
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DCE Directory Services 

DCE is an Open Systems Foundation** (OSF**) architecture that 
provides tools and services to support the creation, use, and 
maintenance of applications in a distributed heterogeneous 
computing environment. It is a layer between the operating system, 
the network, and a distributed application that allows client 
applications to access remote servers. 

With local directories, the physical location of the target database is 
individually stored on each client workstation in the database 
directory and node directory. The database administrator can 
therefore spend a large amount of time updating and changing these 
directories. The DCE directory services provide a central directory 
alternative to the local directories. It allows information about a 
database or a database manager instance to be recorded once in a 
central location, and any changes or updates to be made at that one 
location. 

DCE is not a prerequisite for running DB2, but if you are operating 
in a DCE environment, see Appendix E. Using Distributed 
Computing Environment (DCE) Directory Services for more 
information. 
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Lightweight Directory Access Protocol 
( LDAP ) Directory Se rvices 

Lightweight Directory Access Protocol (LDAP) is an industry 
standard access method to directory services. A directory service is a 
repository of resource information about multiple systems and 
services within a distributed environment; and it provides client and 
server access to these resources. Each database server instance will 
publish its existence to an LDAP server and provide database 
information to the LDAP directory when the databases are created. 
When a client connects to a database, the catalog information for the 
server can be retrieved from the LDAP directory. Each client is no 
longer required to store catalog information locally on each 
machine. Client applications search the LDAP directory for 
information required to connect to the database. 

LDAP is not a prerequisite for running DB2, but if you are operating 
in an LDAP environment, see Appendix (X Lightweight Directory 
Access Protocol (LDAP) Directory Services for more information. 
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Creating Nodegroups 

You create a nodegroup with the CREATE NODEGROUP 
statement. This statement specifies the set of nodes on which the 
table space containers and table data are to reside. This statement 
also: 



• Creates a partitioning map for the nodegroup. For details 
about the partitioning map, see Partitioning Maps . 

• Generates a partitioning map ID. 

• Inserts records into the following catalog tables: 

o SYSCAT.NODEGROUPS 
o SYSCAT.PARTITIONMAPS 
o SYSCAT.NODEGROUPDEF 

To create a nodegroup using the Control Center: 



1. Expand the object tree until you see the Nodegroups folder. 

2. Right-click the Nodegroups folder, and select Create from 
the pop-up menu. 

3. On the Create Nodegroups window, complete the 
information, use the arrows to move nodes from the 
Available nodes box to the Selected nodes box, and click 
Ok. 



To create a nodegroup using the command line, enter: 

CREATE NODEGROUP <name> ON NODES ( <value> , <value>) 

Assume that you want to load some tables on a subset of the 
database partitions in your database. You would use the following 
command to create a nodegroup of two nodes (1 and 2) in a database 
consisting of at least three (0 to 2) nodes: 

CREATE NODEGROUP mixngl2 ON NODES (1,2) 

For more information about creating nodegroups, refer to the SQL 
Reference manual. 

The CREATE DATABASE command or sqlecrea() API also create 
the default system nodegroups, IBMDEFAULTGROUP, 
IBMCATGROUP, and IBMTEMPGROUP. (See Designing and § 
Choosing Table Spaces for information.) 
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Definition of Database Recovery Log 

A database recovery log keeps a record of all changes made to a 
database, including the addition of new tables or updates to existing 
ones. This log is made up of a number of log extents, each contained 
in a separate file called a log file. 

The database recovery log can be used to ensure that a failure (for 
example, a system power outage or application error) does not leave 
the database in an inconsistent state. In case of a failure, the changes 
already made but not committed are rolled back, and all committed 
transactions, which may not have been physically written to disk, are 
redone. These actions ensure the integrity of the database. 

For more information, see Chapter 19, Recovering a Database . 
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Binding Utilities to the Database 

,^^.„ m ___ , „_ — „ 

When a database is created, the database manager attempts to bind the utilities in db2ubind. 1st to the 
database. This file is stored in the bnd subdirectory of your sqllib directory. 

Binding a utility creates a package, which is an object that includes all the information needed to process 
specific SQL statements from a single source file. 

Note: If you wish to use these utilities from a client, you must bind them explicitly. Refer to the Quick 
Beginnings manual appropriate to your platform for information. 

If for some reason you need to bind or rebind the utilities to a database, issue the following commands using the 
command line processor: 

connect to sample 
bind @db2ubind. 1st 

Note: You must be in the directory where these files reside to create the packages in the sample database. The 
bind files are found in the bnd subdirectory of the sqllib directory. In this example, sample is the name 
of the database. 
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Catalo ging a Databa se 

" When you create~a new database, it is automatically cataloged in the system database directory file. You may 
also use the CATALOG DATABASE command to explicitly catalog a database in the system database 
directory file. The CATALOG DATABASE command allows you to catalog a database with a different alias 
name, or to catalog a database entry that was previously deleted using the UNCATALOG DATABASE 
command. 

The following command line processor command catalogs the personi database as humanres: 

catalog database personi as humanres 
with "Human Resources Database" 

Here, the system database directory entry will have humanres as the database alias, which is different from the 
database name (personi). 

You can also catalog a database on an instance other than the default. In the following example, connections to 
database b are to instance c. 

catalog database b as b at node instance_c 

Note: The CATALOG DATABASE command is also used on client nodes to catalog databases that reside on 
database server machines. For more information, refer to the Quick Beginnings manual appropriate to 
your platform. 

For information on the Distributed Computing Environment (DCE) cell directory, see DCE Directory Services 
and Appendix E, Using Distributed Computing Environment (DCE) Directory Services . 
Note: To improve performance, you may cache directory files, including the database directory, in memory. 
(See Directory Cache Support (dir_cache) for information about enabling directory caching.) When 
directory caching is enabled, a change made to a directory (for example, using a CATALOG 
DATABASE or UNCATALOG DATABASE command) by another application may not become 
effective until your application is restarted. To refresh the directory cache used by a command line 
processor session, issue a db2 terminate command. 

In addition to the application level cache, a database manager level cache is also used for internal, database 
manager look-up. To refresh this "shared" cache, issue the db2stop and db2start commands. 

See Directory Cache Support (dir_cache) for more information about directory caching. 
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C reatin g a Table Space 



- Creating a table space Within a database assigns containers to the table space and records its definitions and 
attributes in the database system catalog. You can then create tables within this table space. 

See Designing and Choosing Table Spaces for design information on table spaces. 

The syntax of the CREATE TABLESPACE statement is discussed in detail in the SQL Reference manual. For 
information on SMS and DMS table spaces, see Designing and Choosing Table Spaces . 

To create a table space using the Control Center: 

1 . Expand the object tree until you see the Table spaces folder. 

2. Right-click the Table spaces folder, and select Create — > Table Space Using Wizard from the pop-up 
menu. 

3. Follow the steps in the wizard to complete your task. 



To create an SMS table space using the command line, enter: 

CREATE TABLESPACE <NAME> 
MANAGED BY SYSTEM 
USING ( ' <path> ■ ) 

To create an SMS table space using the command line, enter: 

CREATE TABLESPACE <NAME> 
MANAGED BY DATABASE 
USING (FILE'<path> t <size>) 

The following SQL statement creates an SMS table space on OS/2 or Windows NT using three directories on 
three separate drives: 

CREATE TABLESPACE RESOURCE 
MANAGED BY SYSTEM 

USING ( 'd:\acc_tbsp \ ' e : \acc_tbsp ■ , 'f:\acc_tbsp') 

The following SQL statement creates a DMS table space on OS/2 using two file containers each with 5,000 
pages: 

CREATE TABLESPACE RESOURCE 
MANAGED BY DATABASE 

USING (FILE' d:\db2data\acc_tbsp' 5000, 
FILE' e:\db2data\acc_tbsp' 5000) 

In the above two examples, explicit names have been provided for the containers. However, if you specify 
relative container names, the container is created in the subdirectory created for the database (see Database 
Directories ). 

In addition, if part of the path name specified does not exist, the database manager creates it. If a subdirectory is 
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created by the database manager, it may also be deleted by the database manager when the table space is 
dropped. 

The assumption in the above examples is that the table spaces are not associated with a specific nodegroup. The 
default nodegroup IBMDEFAULTGROUP is used when the following parameter is not specified in the 
statement: 

IN nodegroup 

The following SQL statement creates a DMS table space on a UNIX-based system using three logical volumes 
of 10 000 pages each, and specifies their I/O characteristics: 

CREATE TABLE SPACE RESOURCE 
MANAGED BY DATABASE 
USING (DEVICE ' /dev/rdblv6 ' 10000, 

DEVICE > /dev/rdblvV 10000, 

DEVICE ■ /dev/rdblv8' 10000) 
OVERHEAD 24.1 
TRANS FERRATE 0 . 9 

The UNIX devices mentioned in this SQL statement must already exist, and the instance owner and the 
SYSADM group must be able to write to them. 

The following example creates a DMS table space on a nodegroup called ODDNODEGROUP in a UNIX 
partitioned database. ODDNODEGROUP must be previously created with a CREATE NODEGROUP 
statement. In this case, the ODDNODEGROUP nodegroup is assumed to be made up of database partitions 
numbered 1, 3, and 5. On all database partitions, use the device /dev/hdisko for 10 000 4 KB pages. In 
addition, declare a device for each database partition of 40 000 4 KB pages. 

CREATE TABLES PACE PLANS 
MANAGED BY DATABASE 

USING (DEVICE » /dev/HDISKO » 10000, DEVICE * /dev/nlhdOl ' 40000) ON NODE 1 
(DEVICE ' / dev/HDISKO ' 10000, DEVICE ■ /dev/n3hd03 ' 40000) ON NODE 3 
(DEVICE '/dev/HDISKO' 10000, DEVICE ' /dev/n5hd05 ' 40000) ON NODE 5 

UNIX devices are classified into two categories: character serial devices and block-structured devices. For all 
file-system devices, it is normal to have a corresponding character serial device (or raw device) for each block 
device (or cooked device). The block-structured devices are typically designated by names similar to "hdO" or 
"fdO". The character serial devices are typically designated by names similar to "rhdO", "rfdO", or "rmtO". These 
character serial devices have faster access than block devices. The character serial device names should be used 
on the CREATE TABLESPACE command and not block device names. 

The overhead and transfer rate help to determine the best access path to use when the SQL statement is 
compiled. See Chapter 22, Application Considerations for information on the OVERHEAD and 
TRANSFERRATE parameters. 

DB2 can greatly improve the performance of sequential I/O using the sequential prefetch facility, which uses 
parallel I/O. See Understanding Sequential Prefetching for details on this facility. 

You can also create a table space that uses a page size larger than the default 4 KB size. The following SQL 
statement creates an SMS table space on a UNIX-based system with an 8 KB page size. 

CREATE TABLESPACE SMS8K 
PAGESIZE 8192 
MANAGED BY SYSTEM 
USING { , FSMS_8K_1' ) 
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Notice that the associated buffer pool must also have the same 8 KB page size. 

The created table space cannot be used until the buffer pool it references is activated. 

The ALTER TABLESPACE SQL statement can be used to add a container to a DMS table space and modify 
"the PREFETCHSIZE, OVERHEAD, and TRANSFERRATE settings for a table space. The transaction issuing 
the table space statement should be committed as soon as possible, to prevent system catalog contention. 
Note: The PREFETCHSIZE should be a multiple of the EXTENTSIZE. For example if the EXTENTSIZE is 

10, the PREFETCHSIZE should be 20 or 30. For more information, See Understanding Sequential 

Prefetching for more information. 

Cr eatin g a System Temporary Table Space 

A system temporary table space is used to store system temporary tables. When a database is created, one of the 
three default table spaces defined is a system temporary table space called "TEMPSPACE1". 

Note: A database must always have at least one system temporary table space since system temporary tables 
can only be stored in such a table space. 

You can use the CREATE TABLESPACE statement to create another system temporary table space. For 
example, 

CREATE SYSTEM TEMPORARY TABLESPACE tmp_tbsp 
MANAGED BY SYSTEM 

USING ( ' d : \tmp_tbsp ' , ' e : \ tmp_tbsp ■ ) 

The only nodegroup that can be specified when creating a system temporary table space is IBMTEMPGROUP. 

Creatin g a Us er Tem po rar y Tabl e Space 

A user temporary table space is used to store declared temporary tables. 

You can use the CREATE TABLESPACE statement to create a user temporary table space: 

CREATE USER TEMPORARY TABLESPACE usr_tbsp 
MANAGED BY DATABASE 

USING (FILE 'd:\db2data\user_tbsp' 5000, 
FILE •e:\db2data\user_tbsp' 50 00) 

Like regular table spaces, user temporary table spaces may be created in any nodegroup other than 
IBMTEMPGROUP. The default nodegroup used when creating a user temporary table space is 
mMDEFAULTGROUP. 

The DECLARE GLOBAL TEMPORARY TABLE statement defines declared temporary tables for use within a 
user temporary table space. 

Creating Ta b le Sp aces in Nodegr o ups 

By placing a table space in a multiple database partition nodegroup, all of the tables within the table space are 
divided or partitioned across each database partition in the nodegroup. The table space is created into a 
nodegroup. Once in a nodegroup, the table space must remain there; it cannot be changed to another nodegroup. 
The CREATE TABLESPACE statement is used to associate a table space with a nodegroup. 
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DB2 Universal Database supports direct disk access (raw I/O). This allows you to attach a direct disk access 
(raw) device to any DB2 Universal Database system. (The only exceptions are the Linux, Windows 95, and 
Windows 98 operating systems.) The following list demonstrates the physical and logical methods for 
identifying this type of device: 

• On Windows, to specify a physical hard drive, use the following syntax: 
\\.\PhysicalDriveN 

where N represents one of the physical drives in the system. In this case, N could be replaced by 0, 1, 2, 

or any other positive integer: 

\\.\PhysicalDisk5 

• On Windows, to specify a logical raw partition (that is, an unformatted partition) use the following 
syntax: 

WAN: 

where N: represents a logical drive letter in the system. For example, N: could be replaced by E: or any 
other drive letter. 

• Note: You must have Windows NT Version 4.0 with Service Pack 3 installed to be able to write logs to a 
device. 

• On UNIX-based platforms, use the character serial device name; for example, /dev/rhdo 
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Creating a Trigger 
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A trigger defines a set of actions that are executed in conjunction with, or triggered by, an INSERT, UPDATE, 
or DELETE clause on a specified base table or a typed table. Some uses of triggers are to: 

• Validate input data 

• Generate a value for a newly-inserted row 

• Read from other tables for cross-referencing purposes 

• Write to other tables for audit-trail purposes 

You cannot use triggers with nicknames. 

You can use triggers to support general forms of integrity or business rules. For example, a trigger can check a 
customer's credit limit before an order is accepted or update a summary data table. 

The benefits of using a trigger are: 

• Faster application development: Because a trigger is stored in the database, you do not have to code the 
actions it does in every application. 

• Easier maintenance: Once a trigger is defined, it is automatically invoked when the table that it is created 
on is accessed. 

• Global enforcement of business rules: If a business policy changes, you only need to change the trigger 
and not each application program. 

To create a trigger using the Control Center: 

1 . Expand the object tree until you see the Triggers folder. 

2. Right-click the Triggers folder, and select Create from the pop-up menu. 

3. Specify information for the trigger. 

4. Specify the action that you want the trigger to invoke, and click Ok. 



To create a trigger using the command line, enter: 

CREATE TRIGGER <name> 

<action> ON <table_name> 

<operation> 

<triggered_action> 

The following SQL statement creates a trigger that increases the number of employees each time a new person 
is hired, by adding 1 to the number of employees (NBEMP) column in the COMPANY_STATS table each time 
a row is added to the EMPLOYEE table. 

CREATE TRIGGER NEW_HIRED 

AFTER INSERT ON EMPLOYEE 
FOR EACH ROW MODE DB2SQL 

UPDATE COMPANY_STATS SET NBEMP = NBEMP+1; 

A trigger body can include one or more of the following SQL statements: INSERT, searched UPDATE, 
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searched DELETE, full-selects, SET transition- variable, and SIGNAL SQLSTATE. The trigger can be 
activated before or after the INSERT, UPDATE, or DELETE statement to which it refers. Refer to the SQL 
Reference for complete syntax information on the CREATE TRIGGER statement. Refer to the Application 
Development Guide for information about creating and using triggers. 

Note: If the trigger is a BEFORE trigger, the column name specified by the triggered action may not be a 
generated column other than the identity column. That is, the generated identity value is visible to 
BEFORE triggers. .. . - - - - . .. - 

Tri gg er De pe n d encies 

All dependencies of a trigger on some other object are recorded in the SYSCAT.TRIGDEP catalog. A trigger 
can depend on many objects. These objects and the dependent trigger are presented in detail in the SQL 
Reference discussion on the DROP statement. 

If one of these objects is dropped, the trigger becomes inoperative but its definition is retained in the catalog. To 
revalidate this trigger, you must retrieve its definition from the catalog and submit a new CREATE TRIGGER 
statement. 

If a trigger is dropped, its description is deleted from the SYSCAT.TRIGGERS catalog view and all of its 
dependencies are deleted from the SYSCAT.TRIGDEP catalog view. All packages having UPDATE, INSERT, 
or DELETE dependencies on the trigger are invalidated. 

If the dependent object is a view and it is made inoperative, the trigger is also marked inoperative. Any 
packages dependent on triggers that have been marked inoperative are invalidated. (For more information, see 
Statement Dependencies When Changing Objects .) 
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About This Book 

This book provides information necessary to use and administer the year 2000 ready, DB2* relational database 
management system (RDBMS) products, and includes: 

• Information about designing, implementing and managing databases 

• Information about configuring and tuning your database environment to improve performance. 
Many of the tasks described in this book can be performed using different interfaces: 

• The Command Processor, which allows you to access and manipulate databases from a graphical 
interface. From this interface, you can also execute SQL statements and DB2 utility functions. Most 
examples in this book illustrate the use of this interface. For more information about using the command 
processor, see the Command Reference, 

• The application programming interface, which allows you to execute DB2 utility functions within an 
application program. For more information about using the application programming interface, see the 
Administrative API Reference. 

• The Control Center, which allows you to graphically perform administrative tasks such as configuring 
the system, managing directories, backing up and recovering the system, scheduling jobs, and managing 
media. The Control Center also contains Replication Administration to graphically set up the 
replication of data between systems. Further, the Control Center allows you to execute DB2 utility 
functions through a graphical user interface. There are different methods to invoke the Control Center 
depending on your platform. For example, use the db2cc command on a command line, (on OS/2) select 
the Control Center icon from the DB2 folder, or use start panels on Windows platforms. For introductory 
help, select Getting started from the Help pull-down of the Control Center window. The Visual Explain 
and Performance Monitor tools are invoked from the Control Center. 

There are other tools that you can use to perform administration tasks. They include: 

• The Script center to store small applications called scripts. These scripts may contain SQL statements, 
DB2 commands, as well as operating system commands. 

• The Alert center to monitor the messages that result from other DB2 operations. 

• The Tool settings to change the settings for the Control Center, Alert Center, and Replication. 

• The Journal to schedule jobs that are to run unattended. 

• The Data warehouse Center to manage warehouse objects. 
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